From 90d581f85a812539b17a2818bb919d58f8a82c12 Mon Sep 17 00:00:00 2001
From: Paul Abbazia <136359239+paul-abb@users.noreply.github.com>
Date: Tue, 4 Aug 2026 17:11:25 -0400
Subject: [PATCH] ci: remove the dead workflow-based Semgrep scan

---
 .github/workflows/semgrep.yml | 39 -----------------------------------
 1 file changed, 39 deletions(-)
 delete mode 100644 .github/workflows/semgrep.yml

diff --git a/.github/workflows/semgrep.yml b/.github/workflows/semgrep.yml
deleted file mode 100644
index bdbcae8..0000000
--- a/.github/workflows/semgrep.yml
+++ /dev/null
@@ -1,39 +0,0 @@
-# Name of this GitHub Actions workflow.
-name: Semgrep
-on:
-  # Scan changed files in PRs (diff-aware scanning):
-  pull_request: {}
-  # Scan on-demand through GitHub Actions interface:
-  workflow_dispatch: {}
-  # Scan mainline branches if there are changes to .github/workflows/semgrep.yml:
-  push:
-    branches:
-      - main
-      - semgrep_integration
-    paths:
-      - .github/workflows/semgrep.yml
-  # Schedule the CI job (this method uses cron syntax):
-  schedule:
-    - cron: '20 17 * * *' # Sets Semgrep to scan every day at 17:20 UTC.
-      # It is recommended to change the schedule to a random time.
-jobs:
-  semgrep:
-    # User definable name of this GitHub Actions job.
-    name: semgrep/ci
-    # If you are self-hosting, change the following `runs-on` value:
-    runs-on: ubuntu-latest
-    container:
-      # A Docker image with Semgrep installed. Do not change this.
-      image: semgrep/semgrep
-    # Skip any PR created by dependabot to avoid permission issues:
-    if: (github.actor != 'dependabot[bot]')
-    steps:
-      # Fetch project source with GitHub Actions Checkout. Use either v3 or v4.
-      - uses: actions/checkout@v4
-      # Run the "semgrep ci" command on the command line of the docker image.
-      - run: semgrep ci
-        env:
-          # Connect to Semgrep AppSec Platform through your SEMGREP_APP_TOKEN.
-          # Generate a token from Semgrep AppSec Platform > Settings
-          # and add it to your GitHub secrets.
-          SEMGREP_APP_TOKEN: ${{ secrets.SEMGREP_APP_TOKEN }}